NetSuite Sent the Invoice. Oracle Signed It. The Payment Token Was the Weapon.
TL;DR An invoice phishing email was delivered through Oracle NetSuite legitimate email infrastructure, passing SPF, DKIM (dual-signed by NetSuite and Oracle Email Delivery), and DMARC with compauth=pass...
Read more